Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier: RxghweHKpFzTe/idrn0DkpNGVLazDoHzFm8MOs4Pa/g=
Subject key identifier: 26:A7:0C:B6:07:24:20:76:53:4A:45:D6:95:AC:7C:8F:6B:3C:AC:13
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 019A24AEEA3B2EB45DB6DC87DCED5AD16830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 08:00:34 +0000
Manifest this update: Mon 27 Oct 2025 08:00:34 +0000
Manifest next update: Tue 28 Oct 2025 08:00:34 +0000
Files and hashes: 1: 5iOaoXB5nkYwr8tIgFWyVnXEhjk.roa (hash: 75KyluwEydMP2XQT86kr0piX0sxxFkty1yXB3kElNns=)
2: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: 5QsJYlWSXfr44D8EYDrwufEtDxEsr2HLthUdOLtNCNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:ea:3b:2e:b4:5d:b6:dc:87:dc:ed:5a:d1:68:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Oct 27 08:00:34 2025 GMT
Not After : Oct 28 08:00:34 2025 GMT
Subject: CN=26a70cb607242076534a45d695ac7c8f6b3cac13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:52:43:0d:ca:6f:50:dc:69:e0:73:93:c1:
62:ef:31:60:0e:0e:82:08:1b:e8:a2:23:c0:1e:8e:
82:bf:f2:a5:a9:8b:75:d5:f5:45:58:63:8b:79:ac:
75:bb:78:5f:18:ce:8b:46:00:78:19:d0:82:72:64:
89:eb:52:37:9a:ad:5a:67:4d:ff:af:6c:c1:44:d4:
44:73:e7:de:fe:e0:1b:76:6d:f6:41:ca:ef:c5:47:
d8:e0:dd:6e:3a:bf:4d:99:fc:e9:dd:ba:54:01:19:
82:b1:a6:80:5d:50:e3:e1:d3:13:bf:8d:c5:4e:69:
cb:4a:1c:96:57:41:d2:79:a2:1d:76:28:09:e2:09:
3a:f4:34:b5:4d:ba:26:93:20:de:11:07:9a:10:61:
77:70:69:22:7e:c1:fd:04:47:c6:2e:88:2c:a3:68:
5c:b9:4d:9f:44:0c:a4:4b:58:68:a5:a7:83:bd:a6:
8e:89:99:03:13:8a:89:6e:f2:cc:d9:18:b7:aa:3e:
4f:f1:4c:e9:0c:33:2c:6a:87:9f:d2:2c:31:42:d6:
d4:ac:5a:22:54:f2:23:32:a9:72:65:c9:91:d4:02:
73:3b:31:62:27:d8:c5:ee:45:3f:07:63:4b:79:d6:
6d:ab:7a:86:ad:e3:05:01:dd:67:6c:9a:ac:f6:80:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A7:0C:B6:07:24:20:76:53:4A:45:D6:95:AC:7C:8F:6B:3C:AC:13
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ef:8d:fd:3b:2f:7a:93:8a:bb:d6:0b:c9:56:9d:20:9d:c8:
db:c1:3c:1a:fe:2b:4b:8a:61:f7:bc:6f:45:9c:15:a2:8f:0d:
f8:6f:e2:7b:c0:89:4c:19:ea:34:7a:d0:d3:ad:f3:41:9e:28:
69:52:20:d2:6b:e8:e4:c6:fd:ad:9f:f8:d0:e9:1b:7f:6d:21:
f3:23:3f:e3:1a:01:db:0a:be:85:ae:23:f0:0d:cd:54:91:6d:
c9:3a:24:e5:85:3b:1f:11:ab:61:f6:2c:42:a5:95:2e:c3:cf:
1d:ac:f5:c8:60:3d:65:5c:16:1e:d8:90:1d:c2:22:4f:86:3f:
e0:a3:cb:d4:1a:cc:5a:dd:55:21:9b:8b:20:1e:ef:50:86:23:
26:98:b8:b0:24:74:a1:cd:68:9b:e1:7b:cd:41:06:fe:70:32:
2e:a3:9f:7d:e3:d6:c0:f0:16:d9:f2:df:61:e8:d7:ae:35:30:
f2:ab:9d:62:60:0b:6d:a5:eb:57:f8:fc:d5:33:43:77:37:b3:
6e:ca:e3:3b:ab:3b:d1:8e:62:15:b5:0b:21:9a:f4:38:79:a5:
3c:7f:aa:2b:56:5c:6a:0a:5b:b9:38:74:fe:97:46:f2:3c:a0:
5c:29:c2:a1:9f:5c:12:9c:77:21:53:22:35:10:71:a6:f0:ca:
b8:dd:e5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:31:14 2025 by rpki-client